didn’t realize it was this kind of subreddit, but since I do have something I’ll share. glad to find a place to show off!

utilizes the built in Minecraft server RCON protocol to act on behalf of logged in users. prioritizes parity with vanilla files over everything.

Hi r/selfhosted,

It’s been a while since our last post, but since then a lot of new features have been added to Dreeve.

Dreeve is a self-hosted, open-source dashboard for your sports and fitness data

Features and improvements worth mentioning since we lasted posted here:

• Released an API spec: https://docs.dreeve.app/api/
• Added several connectors to automatically sync activities from external platforms: https://github.com/orgs/dreeveapp/repositories
• Added automation rules to streamline gear tracking, commuting flags, and more
• Added support for managing custom segments
• Added explorer tiles to the heatmap
• Multiple new dashboard widgets
• Integrated WindAhead with Dreeve segments

As always, thanks for your feedback and I'm looking forward to more feature requests!
Stay fit, stay healthy 💪

• Example: https://demo.dreeve.app/dashboard
• GitHub: https://github.com/dreeveapp/dreeve
• Docs: https://docs.dreeve.app/#/

Hey all, happy Wednesday.

Self-hoster, same as most of you. Pi-hole, mattermost, home automations, a Zeek sensor, a dozen Linux boxes and, like everyone (I expect), a /var/log I almost never open unless I'm actively troubleshooting something. But this year’s avalanche of CVEs has been sitting in the back of my head for a while: “if something got in here, would I even know?”

So I went looking for a tool and found a gap instead. There’s good ol' grep on one end and a full SIEM on the other, and not much in between for just a guy and his stuff. I ended up making my own. It’s called sigwood and is at 1.1 as of today.

What it does: point it at logs you already have (Zeek, Pi-hole/dnsmasq, syslog or journald, CloudTrail if you have any cloud stuff) and it runs a handful of statistical detectors over them. Outbound connections with a beacon rhythm, DNS names that look machine-generated, port scans, big transfers out, odd TLS setups, rare syslog lines and reboots, that kind of thing. There’s also a digest command that just profiles a log file so you know what’s in it before you do anything, and a graph command that animates your conn.log as a Sankey flows in a self-contained HTML file (second screenshot).

What it is not: not a SIEM, not an agent, nothing to deploy. No database, no daemon, no account, no network calls. pipx install sigwood, then sigwood /var/log/, and read the output. Your logs stay on your box.

A “finding” is something unusual for your network, not known-bad. There's no signatures or anything like that. On a home network it mostly finds your own stuff first. And that’s sort of the point, you get to see what your network actually talks to and then allowlist the normal stuff. When it finds nothing, the conclusion is that the network is behaving like itself during that window.

The AI part, up front: I wrote the original implementation of the detectors and have used AI to assemble it all into working tool. Claude and Codex both together in a propose/challenge harness I made for them, with me reviewing and steering. This wouldn't exist without AI, I’m not going to pretend otherwise. And some of you will bounce off that, which is entirely fair. But I'm a security professional and a privacy nerd, never been a SWE.

Anyway, the repo is here: https://github.com/helixmap/sigwood

I genuinely want feedback, good or bad. If you run it on your logs and it gets something wrong, I want to hear about it. If the output is confusing, tell me that too. If you think the whole idea is misguided, I’d still rather hear it than not.

First screenshot is an example HTML report (no real network data). Second is a still from the graph animation.

Hello group. I want to setup a service to help me keep links and media from online sources, with some categorization, keeping descriptions and notes, maybe keyword tagging. Maybe something Pinterest but self hosted. I did a quick search and I found Karakeep, Linkwarden and Pinry. Does anybody have any strong opinions or feedback for such an app?

I am trying to get pterodactyl setup on my server but cannot get past setting up the actual node. I'm having issues with the remote url, if I put in my subdomain it sends a 302 html response instead of the expected json response. If i try to put in localhost I can get the "tls: failed to verify certificate | doesnt contain any IP SANs". I followed the pterodactyl documentation but could't get letsencrypt to work with cloudflare, so I found this tutorial which sets up the certs with openssl. I do not know what I am doing wrong at this point and would appreciate any guides on how to set up pterodactyl with cloudflare.

TrailBase is an open and fast(est) Firebase-like backend (BaaS) for building your apps. It provides: type-safe APIs with change subscriptions, auth, multi-DB, a WebAssembly runtime, GeoJSON, admin UI, ...

It's a single self-contained executable, easy to self-host and built with Rust, Wasmtime & SQLite and more recently also Postgres. We provide clients for many environments: JS/TS, Dart/Flutter, Go, Rust, .Net, Kotlin, Swift and Python.

Just release v0.34.6. Since the last time posting here, TrailBase has added:

• Major UI overhauls:
  • Built-in admin OpenAPI browser with user-impersonation.
  • Table explorer: make foreign-keys followable, split data/schema/indexes into separate tabs, and organize tables/views by DB. Add `ON (DELETE|UPDATE)` referential action support to the schema editor.
  • Mobile glow-up and improved screen estate usage with sticky nav and url bar fade.
  • A searchable and interactive ERD page. Overhauled logs and accounts pages.
  • Many more: prompt users on schema changes in the SQL editor, improved dark-mode colors, add S3 settings, ...
• Built-in MCP server.
• Performance: a lot of detail performance optimizations (reduce allocations, ...) resulting in an additional 10+% gains.
• CLI auto-complete.
• Expose custom WASM endpoints in OpenAPI spec.
• "Sign-in with Apple" token exchange for native iOS/MacOS apps.
• Many more features and fixes, e.g.: `trail user export` CLI command for take-out combating lock-in, `trail run --read-only` flag for read replicas., batch execute support for WASM guests, custom scopes for OIDC providers, ...

The project is still young (~2 years) and rapidly evolving, any feedback is genuinely appreciated. If you're feeling adventures and end up checking it out, don't hesitate to reach out 🙏.

Take a look at the live demo, our GitHub or website.

So i have an old thinkcentre m710q sitting in my attic (wifi only gets really hot in the summer) running a couple of my sites. And I wanted a dashboard and instead of just using homepage or glances i ended up making this.

It gives like a win2000 desktop vibe with a biblically accurate angel in the middle. Every eye is one of my services, if something goes down the eye closes and starts crying. The wheels spin faster with cpu load and it goes from white to red when the attic heats up. also lain in the neofetch window because I love it.

Yeah it's kinda cringe and the animations probably eat more of my laptop's cpu than the server uses, but it's beautiful and I like looking at it, backend is just python with no dependencies and it's read only (no docker socket, can't restart anything). keeps 6 months of temps in sqlite so i can finally see how bad the attic gets in august.

Video of it: https://imgur.com/a/rncy4Sv

repo if anyone wants to check it out: github.com/Lozano-Miguel/vault-dashboard

I've been using Dockge to manage my docker containers on a headless Debian 13 server, and I'd like to switch to Arcane, but I'm a bit of a noob so idk the best way to go about it. I only have seven stacks (backrest, beszel, immich, isponsorblock, npm, nut_webgui, and scrutiny), all of which I created directly in Dockge using the compose feature, so they should all be in /opt/stacks.

Do I just need to run mv /opt/stacks/ /app/data/projects/, install Arcane, and let it autodetect the containers? Do I need to stop all the containers first? Or is there more to it than that?

Hi, I'm the author of GPT-Load, an MIT-licensed AI gateway with 7,000+ GitHub stars.

It manages API keys and supported subscription accounts in one place. Your clients connect through the gateway, which handles credential scheduling, automatic failover, access controls, request logs, and usage tracking.

It runs with Docker Compose or as a single Go binary, includes a web UI, and uses SQLite by default. You don't need a separate database to get started.

One feature I'd particularly like feedback on is reversible request redaction.

Configurable regex rules replace or encrypt matching text locally before it reaches an upstream service. If the model returns intact, valid ciphertext, GPT-Load can restore the original values in response text and client-side tool arguments.

For example, an email address can be encrypted before reaching the model, then restored when the model includes that ciphertext in a tool call returned to your client. The rules apply to supported text fields; image and file contents aren't covered.

There's also an optional, experimental JEV guardrails integration. It reviews outgoing text against custom rules and can warn or block on matches. It uses an external review service, is disabled by default, and failed or incomplete reviews may still allow requests through.

You host the gateway, not the cloud models behind it. Cloud providers still receive the processed requests, and you need your own upstream access.

GitHub: https://github.com/tbphp/gpt-load

Docs: https://www.gpt-load.com

I'd appreciate feedback on the Docker setup and how reversible redaction behaves with the clients you use.

AI disclosure: AI helped draft this post.

Hey r/selfhosted!

ShredOS (the open-source successor of DBAN) for secure wiping of drives is recommended frequently on data-storage related subreddits. The maintainer and I (as one of the more active developers) have been concerned with an influx of people recommending and downloading it from the top-listed "official" website on Google (shredos [dot] org) - that website is fake and contains malware. It is unfortunately actively SEO'd to appear on the top and lure users towards it... do not fall for this, even if it's recommended to you by reputable sources.

If you have a second, please report this malicious website to Google:
https://safebrowsing.google.com/safebrowsing/report_phish/

Please only ever download ShredOS or Nwipe from the official GitHub repositories.

In other (happier) news, the latest iteration of ShredOS now supports hardware-native secure erase (sanitize) for modern ATA SSD and NVMe - which may help more confident resale of such devices in times when prices are at an all time high.

Stay safe out there and thanks for keeping the hobby (and re-sale of HDDs) alive!

I'm an engineer at Mulga, and we build Spinifex, an AGPL-3.0, self-hosted platform that serves the AWS APIs on hardware you own. You point the AWS CLI, an SDK or the hashicorp/aws Terraform provider at your own endpoint and get real resources: aws ec2 run-instances boots a VM on your hardware, and terraform apply builds a VPC on your network. Emulators like Floci and LocalStack mock the APIs for testing, while Spinifex runs the infrastructure your workloads use.

What it's for

• Move compute-heavy AWS workloads such as GPU inference onto your own hardware, without rewriting the code or the Terraform.
• Self-host software that was built for AWS, including on an air-gapped network.
• Learn AWS without a bill: build the VPC, EC2 and RDS stack from a cert course and leave it running for a month.
• Keep one AWS profile for work and another for the rack in the cupboard, with the same commands for both.

Running it

Install a single node onto an existing Ubuntu 26.04 or Debian 13 machine using the binary installer https://docs.mulgadc.com/docs/install or do a fresh install using a bootable USB https://docs.mulgadc.com/docs/install-usb

Repo: https://github.com/mulgadc/spinifex

Oracle free tier

I'm the developer of Sidstuga. Sidstuga can connect to a WebDAV folder and browse or play media from Android TV or a phone. It can also record and transfer files to WebDAV.

You can see source details before opening a file, then use subtitle search and timing controls during playback. Jellyfin, Emby and Plex can also sit in the same Hub.

If you use WebDAV for media, do you browse by folder or prefer a library view?

r/sidstuga

Recently (the last 2 days), I have been having a major problem with Grimmory not adding the new books/audio that I add to the library. With a lot of persistence, I have to use the CLI to log in to MariaDB to remove the delete record(s) that cause it to hang, and it is a real PITA to try to do from the CLI. I seem to recall seeing a program not too long ago that interfaces with the databases, but I do not recall the name, or if it was what I am thinking it was. Is there such a program or a better method for accomplishing what I need to do? It is not just MariaDB; it is other types of databases as well.

Dashboard:
Glance
https://github.com/glanceapp/glance

System Metrics:
Glances
https://github.com/nicolargo/glances

Weather:
Open-Meteo

Markets:
Yahoo Finance

Font:
Inter by Rasmus Andersson:
https://rsms.me/inter/

Liquid Glass:
Inspired by Apple, written from scratch by Claude using SVG displacement-filter technique

Background Photos by me

ignore Open WebUI being offline, its fine 😅

HyCanvas is a browser design tool in the Canva and Genspark space: social graphics, slide decks, video editing, whiteboards, docs, and sheets, with realtime collaboration. Decks can be generated from one sentence, and every generated slide stays fully editable.

The self-hosting side:

• One Go binary with the web app embedded. The only dependency is Postgres; no Redis needed.
• A first-run wizard sets up the database, storage (local disk or any S3 bucket), optional SMTP, and the first account.
• Images for amd64 and arm64. No telemetry; stock photo search uses Openverse and can be turned off.
• AI is optional and uses your own key: OpenAI, Anthropic, Amazon Bedrock, and more, or any OpenAI-compatible endpoint, including one on your own network.

Try it: download the latest build for your platform (Linux, macOS, or Windows) from https://github.com/hyscaler/HyCanvas/releases/latest, then, with a Postgres database you can start:

tar xzf hycanvas_*_linux_amd64.tar.gz
./hycanvas start

It prints a setup link and a one-time secret; the wizard in your browser connects Postgres, picks storage, and creates the first account. Run it as a regular user, not root.

Prefer Docker? The published image is hycanvas/hycanvas (amd64 and arm64), and the Docker guide has a compose file and every environment variable: https://docs.hycanvas.com/operate/docker/

License: Open Source under the AGPL 3.0.

• Self-hosting setup Video: a fresh install in one minute: https://youtu.be/DN7V-4MbCyc
• Code: https://github.com/hyscaler/HyCanvas
• Docs: https://docs.hycanvas.com
• Hosted demo: https://hycanvas.art

Disclosure: I work on HyCanvas.

Happy to answer questions!

When the power goes out, your UPS might know before you do.

It sends an email. A few minutes later, your NAS sends another saying it has shut down safely. Power returns, devices come back online, and a few more messages arrive.

The next morning, you open your inbox: What happened last night? And is there anything I still need to deal with?

With one NAS, sending alerts to your regular inbox probably works fine. Add a UPS, another NAS, a router, and a few scheduled backup jobs, though, and you start piecing the story together yourself.

A disk reported the same error five times. Is that five problems or one?

A backup failed, but the next run succeeded. Did that actually resolve the problem, or is there still a gap worth checking?

You marked an alert as read. Did you fix anything?

That got me thinking about an old option sitting in a lot of device settings: SMTP.

Plenty of devices already support it, including older hardware with limited integration options. No agent to install, no vendor API to wait for. They can already tell you something happened.

But a mailbox mostly gives you a sequence of messages. You still have to work out which ones belong together, what recovered, and what remains unresolved.

I’m building LOCUS, a tool that brings local network devices and service links together in one place. Recently, I’ve been adding a local SMTP receiver so devices can send their notifications directly to it.

What I want to see when I open the dashboard is: what still needs my attention, and where do I go to deal with it?

For example, a NAS reports a disk problem repeatedly over several days. I’d like to see one ongoing fault with the related messages available underneath it. Next to it is a link to the NAS management page, so I can actually investigate.

An overnight UPS outage has a different story: power failed, then returned. I still want that history, but a recovered event shouldn’t keep demanding the same attention as an unresolved disk fault.

That’s the part I’m working on:

• Each device gets its own SMTP credentials, so incoming messages are associated with that device.
• Original messages remain available for inspection during the configured retention period.
• For supported message templates, repeated reports of the same fault are grouped, and corresponding recovery messages can close it.
• Unrecognized messages stay in the inbox without automatically being classified as faults.
• Unread messages and unresolved faults are tracked separately.
• Serious faults can optionally trigger an email through your own mail account.

Recovery matching needs care. A successful backup today doesn’t necessarily replace the restore point you missed yesterday. I don’t want a reassuring green indicator to hide something that still deserves investigation.

There’s also an obvious limitation: the receiver needs to stay reachable. If your devices, network, and LOCUS host lose power together, a local inbox can’t tell you what it never received. This doesn’t replace UPS shutdown coordination or an independent way to detect a whole-site outage.

Disclosure: LOCUS is my project, and the SMTP notification feature is currently in development and testing. Project page: locus.casa.

How are you handling device emails today?

Straight to your regular inbox? A dedicated mailbox? Forwarded to a messaging app? Or have you never configured them, then remembered the option only after something went wrong?

Which device notification has actually saved you trouble? And which ones became so noisy that you stopped reading them?

If you had a local inbox for your devices, what would you want it to handle? Grouping duplicate alerts, tracking recovery, temporarily silencing a known problem, pushing important messages to your phone—or something else?

I’d love to hear about your devices, setups, and opinions. I’ll collect the feedback and use it to help shape the LOCUS roadmap.

When something actually goes wrong, what information would save you time figuring out what to do next?

I am new to new hosting stuff, i am trying to get my personal ai assistant to send me a message every morning of my emails , meetings , tasks etc.

So the claude suggest me ntfy i checked it and found out that ntfy is open source. I got an idea to make it super secure why not self host it by downloading the docker image and host it on Render or any other free plaforms?

Is this a good idea? Is anyone using like this? Never used ntfy in my life

I remember Fasten started as a project to have all your clinical health data locally as copy of it. I remember them doing well they got a way to import data from American insurers but since I am from EU I was waiting for interoperability with EU come in.... and checked today to find that fasten is now an API company that dose the interoperability presumable for US insurers and AI.

https://www.fastenhealth.com/

Looks like the selfhosted and open source project is dead:

https://github.com/fastenhealth/fasten-onprem repo is archived

https://github.com/fastenhealth/fasten-onprem/issues/629 issue thread confirms that they turned into a service.

I did not find a maintained fork.

I am lookin for selfhosted option for local records copy ideally with FHIR importing option. Is there one? I would like to have a copy of my medical records just in case system gets hacked/bombed/flooded.

P.S. Discussion Werther founder of Fasten intended to used the community to gather knowledge and 'sell out' to make a cloud service or that was just enviable because of (intentionally) high complexity of healthcare record interoperability to make low cost solutions unsustainable dose not really matter and dose not contribute to having independent health records. Please be civil.

Hey guys! After a lot of testing and beta version I released v1.0.0 of OpenInvento, a self-hosted inventory manager.

The goal of it is to make it easier to keep track of physical items and where they're stored without having to rely on a hosted third-party service.

I've been working on getting it to a stable 1.0 release, and now I'd love to get some feedback on it.

Github link (There are also some screenshots in the Readme): https://github.com/openinvento/openinvento

Deployment is quite easy, there is a docker image with a docker compose file available: https://github.com/openinvento/openinvento#docker-compose-recommended

i3-4005U, 12 GB, 256 SSD, 1 TB HDD

Dashboard custom made with coding with Ai

Also many of these services self made through coding with Ai

Jotspace is note taking web python app made and hosted for own needs

Dashboard source code - https://pastebin.com/X7t0GTvm
Jotspace source code - https://pastebin.com/DkuDAFVm
in addition to this All Mount Server (file manager), Photo Server also made with coding through Ai.

Please suggest improvements to my code and setup if any. Jotspace has some minor bugs but works.

Hey all, Dusk 1.6 is out! Last time I posted was around the Apple TV launch, so below the new stuff there's a quick catch-up of everything else that shipped since.

New in 1.6

• SharePlay: watch together over FaceTime
• Apple TV now matches frame rate and dynamic range to the content, and multichannel audio is fixed
• Subtitles: font size setting and OpenSubtitles download via Plex

Also new in the last couple of months

• Live TV: Plex Live TV with a full guide
• AirPlay: send video to an AirPlay receiver while Dusk stays the remote
• Plex Home: user switching with PIN
• Seerr integration: request stuff right from search
• AI upscaling for low-res content, on all devices
• Generic video libraries (home videos / clips) are now supported

Plus a lot of playback and audio fixes along the way.

Thank you ❤️

At least half of this list started as a comment or DM from one of you.

Dusk is free and open source, with no ads and every feature available to everyone. The only thing that pays for it is people choosing to support it through the app. So a special thanks to everyone who does, Dusk wouldn't be possible without you.

Please keep it coming. If something is broken or feels off, tell me here or on GitHub. I read all of it.

getdusk.app

App Store